AMENDMENTS TO THE CLAIMS 
The following listing of claims replaces all prior listings of claims in this application. 



1. (Previously Presented) A processor-implemented method of selectively sharing a 
plurality of distributed access-controlled documents, comprising: 

a plurality of content providers cooperating to create a privacy-preserving index 
structure; 

grouping the content providers into a plurality of privacy groups; 

passing a content vector from a first content provider in a privacy group of the plurality 
of privacy groups to a second content provider in the privacy group of the plurality of privacy 
groups; 

the first and second content providers operating on the content vector with a randomized 
algorithm; 

sending a plurality of content vectors to a designated host, each content vector of the 
plurality of content vectors corresponding to a respective privacy group of the plurality of 
privacy groups; 

aggregating the plurality of content vectors into a materialized index comprising the 
privacy-preserving index structure; 

the privacy-preserving index structure mapping a plurality of keywords representing a 
content to be shared to the plurality of content providers; and 

returning a list of the content providers having a subset of the content to be 
shared of the access-controlled documents that comprise a set of the 
keywords that satisfy a query. 

2. (Previously Presented) The method of claim 1, wherein the content providers 
comprise a provider specific search interface for receiving the query and for authenticating a 
searcher. 

3. (Previously Presented) The method of claim 2 5 further comprising the searcher 
submitting the query containing at least one of the keywords to a privacy-preserving index 
system. 
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4. (Cancelled) 



5. (Previously Presented) The method of claim 1, wherein the list of content providers 
comprises at least 50% false positive content providers. 

6. (Previously Presented) The method of claim 1, further comprising the searcher 
submitting the query annotated with an identity for the searcher to a specified content 
provider on the list of content providers. 

7. (Original) The method of claim 6, further comprising the specified content provider 
authenticating the identity of the searcher for allowing access to the content to be shared. 

8. (Previously Presented) The method of claim 7, further comprising the specified 
content provider returning to the searcher at least one of a plurality of documents that match 
the one or more keywords. 

9. (Cancelled) 

10. (Previously Presented) The method of claim 1, wherein at least one privacy group of 
the plurality of privacy groups comprises at least three content providers. 

11. (Previously Presented) The method of claim 1, wherein the plurality of content 
providers are all grouped into a single privacy group. 

12. (Previously Presented) The method of claim 10, further comprising performing a 
randomized index construction algorithm to create the content vectors for the content 
providers in the at least one privacy group. 

13. (Previously Presented) The method of claim 12, further comprising arranging the 
content providers in the at least one privacy group in a ring formation. 
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14. -20. (Cancelled) 

21. (Previously Presented) The method of claim 13, wherein content providers in the ring 
formation sequentially operate on the content vector with a randomized algorithm. 

22. (Previously Presented) The method of claim 21, further comprising the content 
providers in the ring formation passing the content vector and operating on the content vector 
with a randomized algorithm until the content vector has completed rounds around the ring 
formation. 

23. (Previously Presented) The method of claim 22, further comprising each of the 
content providers in the ring formation ORing the passed content vector. 

24. (Previously Presented) The method of claim 23, wherein the ORing introduces false 
positives in a result returned in response to the query. 

25. -35. (Cancelled) 
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